pak26 Privacy Policy

pak26 is an online casino and sports betting platform operated at pak26.org, built specifically for Pakistani players across Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and all other cities and regions of Pakistan. For the purposes of this Privacy Policy, pak26 acts as the data controller responsible for the personal information collected from registered users and visitors to the platform.

This Privacy Policy applies to all data processing activities carried out by pak26 in connection with the operation of its website, mobile interface, customer support channels, payment processing systems, and promotional communications. It should be read alongside the pak26 Terms and Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

pak26 collects personal data only to the extent necessary to provide a fully functional, secure, and compliant online betting experience. The categories of personal data we collect are as follows:

pak26 does not collect sensitive personal data such as biometric data, health records, or political opinions. Where identity documents such as CNIC copies are requested for KYC verification, they are stored in encrypted form and access is strictly limited to authorised compliance personnel.

pak26 collects personal data through the following channels and mechanisms:

• Direct registration: When you create your pak26 account, you voluntarily provide identity, contact, and payment details through the registration form.
• Verification submissions: When you respond to KYC or source-of-funds requests by uploading documents, pak26 collects the data contained within those documents.
• Payment transactions: When you deposit or withdraw PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20, our payment processors share transaction confirmation data with pak26.
• Platform usage: As you browse and interact with pak26.org, our systems automatically collect technical and usage data via server logs and first-party cookies.
• Customer support interactions: When you contact our support team via live chat or email, we record the conversation content and associated account data for service quality and compliance purposes.
• Promotional participation: When you opt in to a bonus, tournament, or promotional campaign, we collect participation data including any information submitted as part of the opt-in process.

pak26 uses the personal data it collects for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with the original reason it was collected:

• Account creation and management: To register your pak26 account, maintain your PKR wallet, process bets, and deliver the full suite of casino and sports betting services.
• Identity and age verification: To confirm that you are aged 21 or above and to verify your identity in accordance with our KYC obligations. pak26 operates a strict 21+ policy and verification is non-negotiable.
• Payment processing: To execute deposits and withdrawals accurately via your chosen payment method, and to maintain complete and auditable financial records.
• Fraud prevention and security: To detect and prevent unauthorised account access, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in the pak26 Terms and Conditions.
• Responsible gaming: To monitor betting patterns for signs of problematic gambling behaviour, to enforce player-set deposit and session limits, and to implement self-exclusion requests promptly and effectively.
• Legal and regulatory compliance: To meet anti-money laundering (AML) obligations, respond to lawful requests from regulatory or law enforcement authorities, and maintain records as required under applicable international gaming standards.
• Customer support: To identify you when you contact support, access your account history to resolve issues, and maintain records of interactions for quality assurance purposes.
• Platform improvement: To analyse aggregate usage patterns and improve the pak26 product experience for players across Pakistan, from the slots lobby to the live cricket betting section.
• Promotional communications: To send you bonus alerts, PSL-season promotions, and platform updates — but only where you have explicitly opted in to receive such communications.

Every data processing activity carried out by pak26 is grounded in one or more of the following legal bases under internationally recognised data protection principles:

• Contractual necessity: Processing your identity, contact, payment, and transactional data is necessary to fulfil our obligations to you under the pak26 Terms and Conditions — including providing betting services, processing PKR transactions, and managing your account.
• Legal obligation: Collecting and retaining KYC documents, financial transaction records, and AML screening data is required to meet obligations under applicable international gaming and financial compliance standards.
• Legitimate interests: Processing technical and usage data for fraud detection, security monitoring, and platform improvement is carried out in pak26's legitimate interests, provided those interests do not override your fundamental privacy rights.
• Consent: Sending you promotional communications and using non-essential cookies is done only with your explicit, freely given, and revocable consent. You may withdraw consent at any time without it affecting the lawfulness of prior processing.

pak26 does not sell, rent, or trade your personal data to any third party. Data is shared only in the following limited and clearly defined circumstances:

• Payment processors: Transaction data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 payment processors solely to execute deposits and withdrawals. These processors operate under their own privacy and security obligations.
• Identity verification providers: KYC and age verification data may be shared with third-party verification service providers who process document checks on pak26's behalf under strict data processing agreements.
• Game software providers: Anonymised or pseudonymised session data may be shared with casino and sportsbook software providers for the purpose of game delivery, RNG certification, and platform integrity audits.
• Regulatory and law enforcement authorities: pak26 will disclose personal data to competent regulatory bodies, financial intelligence units, or law enforcement agencies when required to do so by law, court order, or regulatory direction. We will only disclose the minimum data necessary to comply with such a request.
• Professional advisors: Legal counsel, auditors, and compliance consultants may access limited personal data on a strictly need-to-know basis in the course of providing professional services to pak26, subject to confidentiality obligations.

The pak26 platform is served by infrastructure that may be located outside Pakistan, including in jurisdictions that apply international data protection frameworks. When your personal data is transferred outside Pakistan for processing or storage, pak26 ensures that appropriate safeguards are in place, including:

• Contractual clauses in data processing agreements that require recipient parties to protect personal data to an equivalent standard to this Policy.
• Use of service providers whose jurisdictions maintain recognised adequacy standards for data protection.
• Technical and organisational security measures that apply irrespective of the geographic location of data processing infrastructure.

If you would like specific information about the safeguards applied to any particular international data transfer involving your personal data, please contact pak26 at [email protected].

pak26 retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The following general retention guidelines apply:

• Active account data: Retained for the full duration of the player's active registration on pak26, plus a minimum of five years following account closure to satisfy AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of seven years from the date of the transaction, in accordance with standard financial compliance record-keeping periods.
• KYC and identity documents: Retained for five years from the date of submission or from the date of account closure, whichever is later.
• Customer support records: Retained for three years from the date of the interaction, unless the interaction forms part of an ongoing investigation or dispute.
• Marketing preferences and consent records: Retained for the duration of your account registration plus two years, to demonstrate the lawfulness of historical communications.
• Technical and usage data: Aggregated and anonymised for analytical purposes; identifiable technical logs are retained for no longer than twelve months.

When personal data is no longer required, pak26 securely deletes or anonymises it in a manner that prevents reconstruction or re-identification.

pak26 uses first-party cookies and similar technologies to support the functional operation of the platform and, where you have consented, to improve your experience. We do not use third-party advertising cookies or cross-site tracking technologies.

The cookies used by pak26 fall into the following categories:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, CSRF protection tokens, and preference cookies that remember your language and display settings. These cannot be disabled without rendering the platform unusable.
• Functional cookies: Used to remember your login state, active game session, responsible gaming limit settings, and recent bet history. Consent-based; can be disabled without breaking core functionality.
• Analytical cookies: First-party analytics that help pak26 understand how Pakistani players use the platform — which pages they visit most, where sessions typically end, and how features perform. Data is aggregated and not linked to individual identities. Consent-based.

You may manage cookie preferences at any time through the cookie settings panel accessible in your account settings or via your browser settings. Disabling non-essential cookies will not affect your ability to deposit, bet, or withdraw on pak26.

As a pak26 player, you have the following rights in respect of your personal data. pak26 is committed to honouring these rights promptly and without unnecessary friction:

• Right to access: You may request a copy of all personal data pak26 holds about you at any time. We will provide this within 30 days of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. Minor corrections to contact details can be made directly in your account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to pak26's legal retention obligations (see Section 8). Erasure requests cannot override AML or regulatory record-keeping requirements.
• Right to restrict processing: You may request that pak26 suspend processing of your personal data in certain circumstances, for example while the accuracy of that data is being contested.
• Right to data portability: You may request your personal data in a commonly used, machine-readable format for the purpose of transferring it to another service provider.
• Right to object: You may object to pak26 processing your data on the basis of legitimate interests. pak26 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact the pak26 data team via live chat on pak26.org or by email at [email protected]. Requests are acknowledged within 48 hours and actioned within 30 days. Where a request requires extended processing time, we will notify you in advance.

pak26 enforces a strict minimum age requirement of 21 years for all registered players. The platform is not intended for, and does not knowingly collect personal data from, individuals under the age of 21. Age verification is a mandatory step in the pak26 registration and KYC process.

If pak26 discovers or is notified that personal data has been submitted by or on behalf of a person under the age of 21, that data will be deleted immediately, the associated account will be closed, and any deposited funds will be returned to the originating payment method where technically possible.

pak26 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data exchanged between your device and the pak26 platform is encrypted using TLS (Transport Layer Security) protocols. This applies to registration, login, deposits, withdrawals, and all game interactions.
• Encryption at rest: Sensitive personal data stored in pak26 databases — including identity documents and financial records — is encrypted using AES-256 or equivalent encryption standards.
• Access controls: Access to personal data within pak26's internal systems is restricted on a strict need-to-know basis. Personnel access rights are reviewed regularly and revoked immediately upon role changes or departure.
• Two-factor authentication: pak26 supports and encourages two-factor authentication (2FA) for all player accounts to reduce the risk of unauthorised account access.
• Fraud monitoring: Automated and manual monitoring systems actively scan for suspicious login attempts, unusual transaction patterns, and other indicators of fraud or account compromise on a continuous basis.
• Data breach response: pak26 maintains an incident response plan for data security events. In the event of a breach affecting your personal data, we will notify affected players and relevant authorities in accordance with applicable obligations and without undue delay.

While pak26 applies robust security controls, no system is completely immune to risk. You are encouraged to maintain strong, unique account credentials and to enable 2FA to further protect your pak26 account.

The pak26 platform may reference or link to third-party services such as payment gateways and game software providers. While pak26 selects its service partners carefully and requires them to maintain data protection standards consistent with this Policy, these parties operate their own independent privacy policies.

pak26 is not responsible for the data practices of third-party services. When you interact with a third-party service — such as completing a JazzCash transaction — you are also subject to that service's own privacy terms. pak26 encourages players to review the privacy policies of any third-party service they interact with.

pak26 does not embed third-party social media widgets, advertising networks, or external tracking pixels on any page of pak26.org. All analytics data collected is processed using first-party tools only.

pak26 reserves the right to update this Privacy Policy periodically to reflect changes in platform functionality, data processing practices, or applicable legal and regulatory requirements. When material changes are made, pak26 will:

• Publish the updated Privacy Policy at pak26.org/privacy-policy with a revised effective date prominently displayed at the top of the document.
• Notify registered players via their account-registered email address at least seven days before material changes take effect, summarising the key updates.
• Where a change requires fresh consent — for example, a new data processing purpose — obtain explicit consent from affected players before proceeding with the new processing activity.

Continued use of pak26 after the stated effective date of any revised Privacy Policy constitutes acceptance of the updated terms. If you do not accept the revised Policy, you should close your pak26 account and contact support to exercise your data rights under Section 10.

For any privacy-related enquiries, data rights requests, or concerns about how pak26 handles your personal data, please get in touch through any of the following channels:

• Live Chat: Available on all pages of pak26.org from 09:00 to 02:00 PKT daily. This is the fastest route for time-sensitive privacy queries.
• Email: [email protected] — for formal data rights requests and written privacy enquiries. Responses within two business days.
• Subject Line Guidance: For data rights requests sent by email, please use the subject line "Data Rights Request – [Your Registered Email]" to ensure your request is routed to the correct team without delay.

pak26 is committed to resolving all privacy-related enquiries fairly, transparently, and within the timelines set out in this Policy. If you are dissatisfied with pak26's response to a privacy complaint, you may escalate the matter to the relevant supervisory authority applicable under the operating licence framework within which pak26 is authorised.